Puerto Rico is a significant target in the global cybercrime ecosystem, according to Microsoft’s Digital Defense Report 2026. Between July 2025 and June 2026, more than 3,252 individuals and organizations on the island were identified as victims of credential-theft campaigns, malware, and other cybercriminal operations. The report, released early this week, analyzes cyberthreat activity and underscores how artificial intelligence is accelerating the speed and scale of attacks worldwide.
Microsoft’s Digital Crimes Unit (DCU) led disruption operations to dismantle criminal infrastructure, highlighting that Puerto Rico is not insulated from digital threats affecting major economies across the Americas. Jimena Mora, senior corporate attorney with Microsoft’s DCU, emphasized that Puerto Rico’s exposure reflects the interconnected nature of modern cybercrime. Globally, identity compromise remains the most common entry point for attackers, with phishing accounting for 23 percent of observed intrusions.
Microsoft urges organizations, including those in Puerto Rico, to prioritize identity protection, faster response capabilities, and operational resilience.